Chromium: CVE-2026-13022 Inappropriate implementation in Autofill
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
Categories: Microsoft
Chromium: CVE-2026-13021 Inappropriate implementation in DeviceBoundSessionCredentials
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
Categories: Microsoft
CVE-2026-45930 net: mctp: ensure our nlmsg responses are initialised
Information published.
Categories: Microsoft
CVE-2026-45850 ipvs: skip ipv6 extension headers for csum checks
Information published.
Categories: Microsoft
CVE-2025-68736 landlock: Fix handling of disconnected directories
Information published.
Categories: Microsoft
CVE-2025-68296 drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup
Information published.
Categories: Microsoft
CVE-2026-41086 Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft
CVE-2026-4367 Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing
Information published.
Categories: Microsoft
CVE-2026-46140 Bluetooth: btmtk: validate WMT event SKB length before struct access
Information published.
Categories: Microsoft
